is-a.dev
Powered by

# Category: Threat Intelligence

See all categories.

Artificial Intelligence • Threat Intelligence • Threat Hunting
AI Agents as Attack Vectors

Hello everyone, In my previous post, I explored the use of MCP servers and LLM for DFIR use cases and highlighted their benefits. In this blog, I am looking into a different perspective: the potential abuse of AI agents by threat actors and the impact they could have on an enterprise environment.

2026-02-24
Artificial Intelligence • Malware Analysis • Threat Intelligence
MCP for DFIR

Hello Everyone, I have been seeing many posts regarding MCP servers on X (Twitter) lately, featuring numerous toolkits for coding, documentation, and more. This got me thinking about applying it to DFIR use cases, like Digital Forensics and Malware Analysis. While there are already many MCP servers available for DFIR, I wanted to build some on my own to better understand the architecture, as well as explore some readily available servers from reputable sources. So In this post, I will cover setting up a local LLM and building some simple MCP servers specifically for DFIR.

2026-02-12
Malware Analysis • Threat Hunting • Threat Intelligence
A Closer Look At Rust Based Malware

For Educational purpose only Spreading Malware is a violation of the law, so please don't create and send any malware using the tactics provided here to

2023-02-27
Android • Threat Intelligence
Weaponizing Magisk Modules

For Educational purpose only. Spreading Malware is a violation of the law, so please don't create and send any malware using the tactics discussed here to

2023-05-05